Lucene search
Veracode Vulnerability DatabaseVERACODE:25684HistoryJun 15, 2020 - 7:39 a.m.
Privilege Escalation
2020-06-1507:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
EPSS
0.001
Percentile
30.8%
Apache Karaf is vulnerable to privilege escalation. A user with a viewer role and non-admin privilege can call get* in etc/jmx.acl.cfg. Subsequently, calling getMBeansFromURL can lead to SSRF and pollution of the MBean registry.
Related
prion
prion
Privilege escalation
2020-06-12 22:15:00
osv
osv
CVE-2020-11980
2020-06-12 22:15:11
Server-Side Request Forgery in Karaf
2022-02-10 23:04:32
cvelist
cvelist
CVE-2020-11980
2020-06-12 21:55:34
redhatcve
redhatcve
CVE-2020-11980
2020-06-24 10:56:27
github
github
Server-Side Request Forgery in Karaf
2022-02-10 23:04:32
nvd
nvd
CVE-2020-11980
2020-06-12 22:15:11
cve
cve
CVE-2020-11980
2020-06-12 22:15:11
redhat
redhat
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05